Two years later, UWindsor remains mum on whether ransom paid to cyberattackers